Can't it ask for the blocks this transaction's coins are coming from? If all 10 connected nodes send the same old blocks, it's which trustworthy. There is always a risk, but nothing that simply warning msg can't solve. It's similar to the 0-conf stuff.